Re: FreeBSD Security Advisory FreeBSD-SA-10:01.bind

2010-01-07 Thread Kevin Oberman
> Date: Thu, 07 Jan 2010 15:16:43 -0800 > From: Doug Barton > Sender: owner-freebsd-sta...@freebsd.org > > Thomas Rasmussen wrote: > > Hello, > > > > While this is all true, this vulnerability is for caching servers, > > not authorative ones. It is pretty easy to setup DLV validation on a > > re

Re: FreeBSD Security Advisory FreeBSD-SA-10:01.bind

2010-01-07 Thread Doug Barton
Thomas Rasmussen wrote: > Hello, > > While this is all true, this vulnerability is for caching servers, > not authorative ones. It is pretty easy to setup DLV validation on a > recursive bind server. However, it is not enabled by default on FreeBSD, > so Stephen should be safe. FWIW, I agree with

Re: FreeBSD Security Advisory FreeBSD-SA-10:01.bind

2010-01-06 Thread Thomas Rasmussen
Kevin Oberman wrote: Date: Wed, 06 Jan 2010 17:15:12 -0600 From: Stephen Montgomery-Smith Sender: owner-freebsd-sta...@freebsd.org FreeBSD Security Advisories wrote: I. Background BIND 9 is an implementation of the Domain Name System (DNS) protocols. The named(8) daemon is an Internet

Re: FreeBSD Security Advisory FreeBSD-SA-10:01.bind

2010-01-06 Thread Kevin Oberman
> Date: Wed, 06 Jan 2010 17:15:12 -0600 > From: Stephen Montgomery-Smith > Sender: owner-freebsd-sta...@freebsd.org > > FreeBSD Security Advisories wrote: > > > I. Background > > > > BIND 9 is an implementation of the Domain Name System (DNS) protocols. > > The named(8) daemon is an Internet

Re: FreeBSD Security Advisory FreeBSD-SA-10:01.bind

2010-01-06 Thread Stephen Montgomery-Smith
FreeBSD Security Advisories wrote: I. Background BIND 9 is an implementation of the Domain Name System (DNS) protocols. The named(8) daemon is an Internet Domain Name Server. DNS Security Extensions (DNSSEC) provides data integrity, origin authentication and authenticated denial of existence